Capabilities Statement | Flawsbug

Flawsbug LLC is a Maryland-based small business delivering penetration testing, continuous security monitoring, managed IT and secure software development to government agencies, prime contractors, and regulated commercial clients.

Our leadership combines federal IT experience with hands-on offensive security work, so engagements are scoped realistically and findings come back as action, not noise.

6Core service lines

North Bethesda, MDHeadquartered in Maryland

LLCSmall business designation

Point of contact

Donn Gordon
Founder & CEO

(227) 259-7287
contact@flawsbug.com
North Bethesda, Maryland

What We Do

Core competencies

🔒

Penetration Testing & Red Team Operations

Adversary simulation against networks, applications and personnel, reported by severity with remediation paths.

🔍

Vulnerability Assessment & Remediation Support

Identification, prioritization and hands-on closure of findings.

📡

Security Monitoring & Incident Response

Continuous detection with a defined response when anomalous activity appears.

💻

Managed IT Services & Infrastructure Support

Day-to-day operations built secure by design.

⚙️

Secure Software Development & Applied AI

Custom applications engineered by practitioners who test how software fails.

📱

Mobile & Endpoint Device Security

Hardened configurations and threat detection for personnel handling sensitive information.

Why Flawsbug

Differentiators

Practitioner-led. Leadership with federal IT experience at the U.S. Department of Energy.
Offense and defense under one roof. We test the environment, then help operate and defend it — no handoff between vendors.
Actionable reporting. Findings ranked by severity with remediation steps, not raw scanner output.
Direct senior access. Clients work with the people performing the assessment.
National Capital Region. Maryland-based and positioned to support agencies and primes on site.

Who we serve

Federal, state & local agencies Prime contractors Regulated commercial clients Businesses without in-house security staff

Corporate data

Legal name: Flawsbug LLC
Location: North Bethesda, MD 20852
Business type: Small business (LLC)
UEI: to be added
CAGE code: to be added
Phone: (227) 259-7287
Email: contact@flawsbug.com

NAICS codes

541512 — Computer systems design services
541519 — Other computer related services
541511 — Custom computer programming
541513 — Computer facilities management
541690 — Scientific & technical consulting
611420 — Computer training

Leadership

Who leads the work

Donn Gordon

Founder & CEO, Flawsbug

Former IT consultant for the U.S. Department of Energy. Leads security and IT delivery, and works directly with clients from the first conversation through the final report.

Dr. Cornelius Stephens

Co-founder & Chief Operating Officer

Oversees company operations.

How We Work

Engagement approach

1. Scope & rules of engagement

We agree in writing on targets, methods, timing and escalation paths before any testing begins.

2. Assess

Reconnaissance, vulnerability identification and controlled exploitation against the agreed scope.

3. Report

Findings ranked by severity, each with business impact, evidence and a specific remediation path.

4. Remediate & retest

We support your team through closure, then verify the fix held.

Severity model

Critical — exploitable now High — serious exposure Medium — real risk under conditions Low — hardening & hygiene

Teaming

Open to teaming, subcontracting and joint-venture arrangements with primes and fellow small businesses. Over a decade of combined industry experience across cybersecurity, software development and IT services.

Cybersecurity for government and prime contractors